Your Privacy at dbd111 — What We Collect and Why
At dbd111, we treat the privacy of every player with the same seriousness we apply to platform security. This Privacy Policy sets out precisely what personal data we collect, the lawful basis on which we process it, how long we retain it, and the rights available to you as a registered player in Bangladesh.
256-bit SSL Encryption
Every connection between your browser and dbd111's servers is encrypted with industry-standard 256-bit SSL. Your login credentials, payment details, and personal information are never transmitted in plain text under any circumstances.
Data Minimisation Principle
dbd111 only collects personal data that is strictly necessary for the purpose for which it is gathered. We do not harvest data speculatively or share it with unrelated third parties for profit. Your data is used exclusively to operate your Account and improve your experience on the platform.
No Unsolicited Marketing
dbd111 will never send you promotional communications without your explicit consent. You may update your marketing preferences at any time from your Account settings, or by contacting support. Opting out of marketing has no effect on your ability to use the platform.
Secure Data Storage
All personal data held by dbd111 is stored on servers protected by multi-layered access controls, firewall systems, and regular independent security audits. Access to personal data is restricted to authorised personnel on a strict need-to-know basis only.
Your Rights Are Upheld
As a dbd111 player, you hold the right to access, correct, and request deletion of your personal data, subject to our legal retention obligations. Submit a data request at any time by contacting [email protected] and we will respond within 30 days.
Payment Data Isolation
Payment instrument details — including bKash wallet numbers, Nagad account identifiers, and bank card numbers — are handled exclusively through our certified payment partners. dbd111 does not store full card numbers or mobile banking PINs on our own systems at any point.
Information We Collect
dbd111 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser as you interact with our services, and in limited cases from third-party verification providers as part of our KYC obligations. The categories of data we collect are described in detail below.
Identity and Contact Data
- Full legal name as it appears on your Bangladesh National ID (NID) or passport.
- Date of birth, collected to verify that you meet the 18+ age requirement.
- Email address, used for account notifications, security alerts, and support correspondence.
- Bangladesh mobile number (Grameenphone, Robi, Banglalink, Teletalk, or Airtel), used for login security and bKash / Nagad payment linkage.
- Residential address, collected during enhanced KYC verification where required by our AML procedures.
- Government-issued ID document (NID, passport, or driving licence), uploaded during KYC verification only and stored in an encrypted document vault.
Usage and Technical Data
- IP address and geolocation — recorded at login and during transactions to detect fraud and ensure you are not accessing from a prohibited territory.
- Device fingerprint — including operating system, browser type, screen resolution, and installed font set, used for fraud detection and multi-account prevention.
- Session timestamps — login time, logout time, and session duration, retained for security audit and responsible gaming monitoring purposes.
- Betting and gaming history — a full log of all wagers placed, games played, and outcomes received, retained for account integrity, dispute resolution, and regulatory compliance.
- Transaction history — all deposit and withdrawal records, including method, amount in BDT, and processing timestamp.
- Communications data — records of all live chat sessions, support emails, and WhatsApp interactions with dbd111 staff, retained for quality assurance and dispute evidence.
How We Use Your Personal Data
dbd111 processes personal data only where a lawful basis for processing exists. For each processing activity, we have identified the applicable lawful basis in the table below. We do not process your personal data in a way that is incompatible with the purpose for which it was collected.
| Processing Purpose | Categories of Data Used | Lawful Basis |
|---|---|---|
| Account registration and management | Identity, contact, and authentication data | Performance of contract between you and dbd111 |
| Age verification and KYC compliance | Date of birth, government-issued ID documents | Legal obligation — minimum age requirement enforcement |
| Processing deposits and withdrawals | Payment method identifiers, transaction records | Performance of contract; legal obligation (AML) |
| Fraud detection and security monitoring | IP address, device fingerprint, session logs, transaction patterns | Legitimate interests — protecting the platform and its players |
| Responsible gaming monitoring | Session duration, wagering history, self-exclusion requests | Legal obligation; legitimate interests — player welfare |
| Customer support and dispute resolution | Communications data, account history, transaction records | Performance of contract; legitimate interests |
| Marketing communications (where consented) | Email address, mobile number, game preference data | Explicit consent — opt-in only, revocable at any time |
| Platform improvement and analytics | Anonymised usage data, aggregated session statistics | Legitimate interests — service development |
| Legal and regulatory compliance | All categories as required by applicable law | Legal obligation — compliance with applicable regulations |
Sharing and Disclosure of Data
dbd111 does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. We share personal data only where strictly necessary to deliver our services, meet our legal obligations, or protect the security and integrity of the platform. The categories of third parties with whom we may share your data are described below.
Payment Processing Partners: To process your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank transactions, we share the minimum necessary payment reference data with the relevant payment service provider. These partners are contractually bound to use this data solely for processing the specific transaction and are prohibited from using it for any other purpose.
Identity Verification Providers: Where enhanced KYC is required, we may pass your submitted identity documents to a contracted third-party verification service operating under strict data processing agreements. These providers confirm identity and age against official Bangladesh government records and are not permitted to retain your documents beyond the verification period.
Game and Software Providers: Third-party game studios whose titles appear on dbd111 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive only anonymised session tokens to load game content. They do not receive your name, address, payment details, or any directly identifiable personal data.
- Regulatory Authorities: dbd111 may be legally required to disclose personal data to regulatory, law enforcement, or judicial authorities upon receipt of a valid and lawful request. We will notify affected players where permitted by law to do so before complying with such a request.
- Anti-Money Laundering Reporting: In accordance with internationally recognised AML principles, dbd111 may be required to file a Suspicious Activity Report (SAR) with the relevant authority without notifying the subject of the report. This is a legal obligation and cannot be overridden by player consent or request.
- Fraud Prevention Networks: dbd111 participates in shared fraud prevention databases where known fraudulent account identifiers, device fingerprints, and payment method flags may be exchanged with other gaming operators to prevent serial fraud. Only flagged, non-personal identifiers are shared — not names or contact details.
- Business Transfers: In the event that dbd111 undergoes a merger, acquisition, or asset sale, player Account data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and given the opportunity to request Account closure before the transfer takes effect.
Data Retention Periods
dbd111 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following table sets out our standard data retention periods by category. After these periods have elapsed, data is securely deleted or permanently anonymised.
| Data Category | Standard Retention Period | Legal Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance and dispute resolution obligations |
| KYC identity documents | 5 years from the date of verification | Legal obligation — identity verification records |
| Transaction and payment records | 7 years from transaction date | Financial record-keeping and AML compliance |
| Betting and gaming history | 5 years from the date of each wager | Dispute resolution, fraud investigation, regulatory compliance |
| Customer support communications | 3 years from the date of the interaction | Legitimate interests — quality assurance and dispute evidence |
| Marketing consent records | Duration of consent + 3 years post-withdrawal | Proof of consent and opt-out compliance |
| Fraud investigation records | 7 years from the date of incident closure | Legal obligation — financial crime record-keeping |
| Anonymised analytics data | Indefinite (no personal data retained) | Legitimate interests — platform improvement |
Your Data Rights as a Player
As a player on the dbd111 platform, you hold a defined set of rights in relation to your personal data. These rights are described below. To exercise any of them, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered email address. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.
Right of Access
Request a copy of all personal data dbd111 holds about you, along with information on how it is being used, who it has been shared with, and how long it will be retained.
Right to Rectification
Request correction of any personal data that is inaccurate or incomplete. You may update most contact details directly from your Account settings without needing to contact support.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies.
Right to Restrict Processing
Request that dbd111 pauses processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a legal claim is in progress.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format (CSV or JSON) where technically feasible, enabling you to transfer your data to another service provider.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for fraud detection or marketing. dbd111 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Challenge Automated Decisions
Where an automated process has resulted in an Account restriction, bet void, or fraud flag, request a manual human review of that decision by a member of our compliance team.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint
If you believe dbd111 has mishandled your personal data, you may lodge a formal complaint with our Data Protection team. If you remain unsatisfied, you have the right to escalate to the relevant supervisory authority in your jurisdiction.
Security Measures We Apply
dbd111 applies a layered security architecture to protect the personal data of all players. Our security programme is reviewed and updated on a regular basis in response to the evolving threat landscape facing online gaming platforms in Bangladesh and globally.
The following technical and organisational measures are currently in place:
- Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using TLS 1.3, the current industry gold standard for web encryption. HTTP connections are automatically redirected to HTTPS.
- Encrypted data at rest: Personal data stored in our databases is encrypted at rest using AES-256. Encryption keys are managed in a dedicated key management system (KMS) separate from the encrypted data stores.
- Access control and role separation: Access to personal data is granted exclusively on a need-to-know basis. Staff roles are segmented so that no single individual can access both customer identity data and payment transaction records simultaneously.
- Real-time intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems (IDS) that flag anomalous access patterns, brute-force attempts, and data exfiltration indicators in real time.
- Regular penetration testing: dbd111 commissions independent penetration tests of our web application and infrastructure on a periodic basis. Critical findings are remediated within a defined SLA before the next testing cycle.
- Backup and disaster recovery: Player data is backed up to geographically separate, encrypted storage locations on a daily basis. Our disaster recovery plan is tested at least twice per year to ensure data can be restored within a defined recovery time objective.
Changes to This Privacy Policy
dbd111 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our data processing activities, or the structure of our business. The updated policy will be published on this page with a revised Effective Date at the top of the document.
Where a proposed change is material — meaning it significantly affects how we use your personal data or reduces a right previously available to you — we will provide at least 14 days' advance notice by email to your registered address before the change takes effect. For non-material updates (such as clarifications of existing practices, corrections of typographical errors, or restructuring of the document for readability), the updated policy takes effect from the published Effective Date without prior notification.
Continued use of the dbd111 platform after a Privacy Policy update takes effect constitutes acceptance of the revised policy. If you do not agree to a material change, you have the right to close your Account before the change becomes effective; any real-money balance will be refunded to your registered payment method subject to the conditions described in our Terms & Conditions.
We encourage all players to review this Privacy Policy periodically. The most current version will always be available at dbd111.net/privacy-policy. If you have any questions about how your personal data is handled, our Data Protection team is available at [email protected] during the hours of 09:00–23:00 BST, seven days a week.
Your Data Is Safe — Now Let's Play
Now that you understand exactly how dbd111 protects your personal data, explore everything our platform has to offer — from BPL cricket betting and live casino tables to hundreds of slot titles, all in BDT with instant bKash and Nagad support.